1565916 - Shutdown hang while fuzzing

Status: RESOLVED INCOMPLETE

(Core :: Graphics: WebRender, defect, P3)

Description

[Dhiraj Mishra]

User Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

This crash was identified while fuzzing FF with grizzly.
Crash: e6bada69-1a19-4c2a-ab6c-1eb370190714

Below trace for reference.

AdapterDeviceID: 0x0a16
AdapterDriverVendor: mesa/i965
AdapterDriverVersion: 19.0.2.0
AdapterVendorID: 0x8086
Add-ons: foxyproxy%40eric.h.jung:6.6.2,translator%40zoli.bod:3.0.3.3,markdown-here-webext%40adam.pritchard:2.13.1,formautofill%40mozilla.org:1.0,screenshots%40mozilla.org:39.0.0,webcompat%40mozilla.org:4.3.2,fxmonitor%40mozilla.org:3.0,default-theme%40mozilla.org:1.0,google%40search.mozilla.org:1.0,amazondotcom%40search.mozilla.org:1.1,bing%40search.mozilla.org:1.0,ddg%40search.mozilla.org:1.0,ebay%40search.mozilla.org:1.0,twitter%40search.mozilla.org:1.0,wikipedia%40search.mozilla.org:1.0,langpack-en-GB%40firefox.mozilla.org:68.0,langpack-en-CA%40firefox.mozilla.org:68.0
BuildID: 20190706110151
ContentSandboxCapabilities: 119
ContentSandboxCapable: 1
ContentSandboxLevel: 4
CrashTime: 1563123618
DOMIPCEnabled: 1
FramePoisonBase: 9223372036600930304
FramePoisonSize: 4096
InstallTime: 1562943181
IsWayland: 0
MozCrashReason: MOZ_CRASH(Shutdown hanging before starting.)
Notes: Ubuntu 18.04.2 LTSFP(D00-L1000-W00000000-T000) WR? WR- OMTP? OMTP+3
ProductID: {ec8030f7-c20a-464f-9b0e-13a3a9e97384}
ProductName: Firefox
ReleaseChannel: release
SafeMode: 0
SecondsSinceLastCrash: 1036093
ShutdownProgress: quit-application
StartupCrash: 0
StartupTime: 1563117910
TelemetryEnvironment: {"build":{"applicationId":"{ec8030f7-c20a-464f-9b0e-13a3a9e97384}","applicationName":"Firefox","architecture":"x86-64","buildId":"20190706110151","version":"68.0","vendor":"Mozilla","displayVersion":"68.0","platformVersion":"68.0","xpcomAbi":"x86_64-gcc3","updaterAvailable":false},"partner":{"distributionId":"canonical","distributionVersion":"1.0","partnerId":"ubuntu","distributor":"canonical","distributorChannel":"ubuntu","partnerNames":["ubuntu"]},"system":{"memoryMB":7881,"virtualMaxMB":null,"cpu":{"count":4,"cores":2,"vendor":"GenuineIntel","family":6,"model":69,"stepping":1,"l2cacheKB":256,"l3cacheKB":3072,"speedMHz":2700,"extensions":["hasMMX","hasSSE","hasSSE2","hasSSE3","hasSSSE3","hasSSE4_1","hasSSE4_2","hasAVX","hasAVX2","hasAES"]},"os":{"name":"Linux","version":"4.15.0-54-generic","locale":"en-IN"},"hdd":{"profile":{"model":null,"revision":null,"type":null},"binary":{"model":null,"revision":null,"type":null},"system":{"model":null,"revision":null,"type":null}},"gfx":{"D2DEnabled":null,"DWriteEnabled":null,"ContentBackend":"Skia","Headless":false,"adapters":[{"description":"Mesa DRI Intel(R) Haswell Mobile ","vendorID":"0x8086","deviceID":"0x0a16","subsysID":null,"RAM":1536,"driver":null,"driverVendor":"mesa/i965","driverVersion":"19.0.2.0","driverDate":null,"GPUActive":true}],"monitors":[{"screenWidth":1366,"screenHeight":768}],"features":{"compositor":"basic","gpuProcess":{"status":"unused"},"wrQualified":{"status":"blocked-vendor-unsupported"},"webrender":{"status":"opt-in"}}},"appleModelId":null},"settings":{"blocklistEnabled":true,"e10sEnabled":true,"e10sMultiProcesses":8,"telemetryEnabled":false,"locale":"en-CA","intl":{"requestedLocales":["en-IN"],"availableLocales":["en-CA","en-GB","en-US"],"appLocales":["en-US","en-CA","en-GB","und"],"systemLocales":["en-IN"],"regionalPrefsLocales":["en-IN"],"acceptLanguages":["en-US","en"]},"update":{"channel":"release","enabled":true,"autoDownload":false},"userPrefs":{"browser.cache.disk.capacity":1048576,"browser.shell.checkDefaultBrowser":true,"browser.search.region":"AE","browser.search.widget.inNavBar":false,"general.smoothScroll":false},"sandbox":{"effectiveContentProcessLevel":4},"addonCompatibilityCheckEnabled":true,"isDefaultBrowser":true},"profile":{"creationDate":17745},"addons":{"activeAddons":{"[e-mail]":{"version":"3.0.3.3","scope":1,"type":"extension","updateDay":17868,"isSystem":false,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Translate the selected text and the full page with Google Translate.","name":"Google Translator for Firefox","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":17868,"signedState":2},"[e-mail]":{"version":"2.13.1","scope":1,"type":"extension","updateDay":18052,"isSystem":false,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Write your email in Markdown, then make it pretty.","name":"Markdown Here","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18052,"signedState":2},"[e-mail]":{"version":"1.0","scope":1,"type":"extension","updateDay":18083,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":null,"name":"Form Autofill","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":17982},"[e-mail]":{"version":"39.0.0","scope":1,"type":"extension","updateDay":18083,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Take clips and screenshots from the Web and save them temporarily or permanently.","name":"Firefox Screenshots","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":17982},"[e-mail]":{"version":"4.3.2","scope":1,"type":"extension","updateDay":18083,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Urgent post-release fixes for web compatibility.","name":"Web Compat","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":17982},"[e-mail]":{"version":"3.0","scope":1,"type":"extension","updateDay":18083,"isSystem":true,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":null,"name":"Firefox Monitor","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18033},"[e-mail]":{"version":"6.6.2","scope":1,"type":"extension","updateDay":18089,"isSystem":false,"isWebExtension":true,"multiprocessCompatible":true,"blocklisted":false,"description":"Proxy switching by URL, made easy!","name":"FoxyProxy Standard","userDisabled":false,"appDisabled":false,"foreignInstall":false,"hasBinaryComponents":false,"installDay":17747,"signedState":2}},"theme":{"id":"[e-mail]","blocklisted":false,"description":"A theme with the operating system color scheme.","name":"Default","userDisabled":false,"appDisabled":false,"version":"1.0","scope":4,"foreignInstall":false,"hasBinaryComponents":false,"installDay":18089,"updateDay":18083},"activePlugins":[{"name":"Shockwave Flash","version":"32.0.0.156","description":"Shockwave Flash 32.0 r0","blocklisted":false,"disabled":false,"clicktoplay":true,"mimeTypes":["application/x-shockwave-flash","application/futuresplash"],"updateDay":17750},{"name":"Shockwave Flash","version":"32.0.0.223","description":"Shockwave Flash 32.0 r0","blocklisted":false,"disabled":false,"clicktoplay":true,"mimeTypes":["application/x-shockwave-flash","application/futuresplash"],"updateDay":18088}],"activeGMPlugins":{"gmp-gmpopenh264":{"version":"1.8.1","userDisabled":false,"applyBackgroundUpdates":1}}},"experiments":{"rollout-monitor-v2-1505837":{"branch":"active","type":"normandy-prefrollout"}}}
ThreadIdNameMapping: 6249:"Gecko_IOThread",6251:"JS Helper",6252:"JS Helper",6254:"JS Helper",6253:"JS Helper",6250:"JS Watchdog",6255:"Timer",6256:"Link Monitor",6265:"Cache2 I/O",6266:"Cookie",6270:"GMPThread",6271:"Worker Launcher",6272:"SoftwareVsyncThread",6274:"Compositor",6275:"ImgDecoder #1",6276:"ImageIO",6281:"ImageBridgeChild",6282:"IPDL Background",6283:"DOM Worker",6293:"StyleThread#1",6292:"StyleThread#0",6294:"StyleThread#2",6295:"Breakpad Server",6304:"FS Broker 6298",6311:"ProcessHangMon",6322:"ImgDecoder #2",6337:"DataStorage",6341:"Cache I/O",6342:"mozStorage #1",6343:"mozStorage #2",6344:"HTML5 Parser",6345:"mozStorage #3",6346:"mozStorage #4",6372:"DOM Worker",6373:"QuotaManager IO",6374:"localStorage DB",6381:"FS Broker 6377",6405:"URL Classifier",6406:"Classifier Update",6423:"mozStorage #5",6427:"mozStorage #6",6428:"mozStorage #7",6439:"mozStorage #8",7159:"DOM Worker",7562:"mozStorage #9",15108:"DNS Resolver #18",15124:"ImgDecoder #5",16791:"DNS Resolver #20",18013:"DNS Resolver #23",18519:"DNS Resolver #24",18520:"DNS Resolver #25",18522:"DNS Resolver #26",18523:"DNS Resolver #27",18525:"DNS Resolver #28",19980:"FS Broker 19978",20015:"StreamTrans #72",20045:"FS Broker 20043",20109:"StreamTrans #76",20453:"IndexedDB #25",20454:"Shutdown Hang Terminator",20455:"IndexedDB #26",
Throttleable: 1
URL: view-source:http://127.0.0.1:37438/test_12967.html
UptimeTS: 5709.99410389
Vendor: Mozilla
Version: 68.0
useragent_locale: en-CA

This report also contains technical information about the state of the application when it crashed.

Comment 1

[Andrew McCreight [:mccr8]]

This is a shutdown hang, not a security issue:
MozCrashReason: MOZ_CRASH(Shutdown hanging before starting.)

Also, you should set up symbolication or something so the crash isn't just libxul.so@0x3be6f39

Comment 2

[Tyson Smith [:tsmith]]

A test case would also be helpful. Grizzly outputs test cases to the results directory.

Comment 3

[Nicolas Silva [:nical]]

Is it possible to produce backtraces of all threads during the hang? without it it will be hard to get started with this.

Comment 4

[Wayne Mery (:wsmwk)]

Can you still reproduce?

Comment 5

[BugBot [:suhaib / :marco/ :calixte]]

Redirect a needinfo that is pending on an inactive user to the triage owner.
:gw, since the bug has recent activity, could you have a look please?

For more information, please visit auto_nag documentation.

Comment 6

[Andrew McCreight [:mccr8]]

I think it is fine to mark this old bug incomplete pending further information from the reporter.